General
-
Target
212b12e2686111514455c97b689c8457.zip
-
Size
437KB
-
Sample
210319-mz8nmv7nea
-
MD5
a2df4c5adccaf5c9475e6c25238c8f01
-
SHA1
817d7f27789782bbf56cdf7d4ea06a2c36e7c017
-
SHA256
e65a1457c10180cc8fb8c1afb32c5df452b455e1f46a5242dc1bdfaa3e930407
-
SHA512
1a6f6d9bd09cc91a5db4cf6f9ccaab2661d89c12795fa9bbcf809a59bc02846f6c757d0a02f7c2f14295df72f287ea4ce77774cef6b4b1d691d4a6b5578d8374
Static task
static1
Behavioral task
behavioral1
Sample
212b12e2686111514455c97b689c8457.exe
Resource
win7v20201028
Malware Config
Targets
-
-
Target
212b12e2686111514455c97b689c8457
-
Size
493KB
-
MD5
212b12e2686111514455c97b689c8457
-
SHA1
2c39181e491ccea8f3eb1020b698bfaf57b31c15
-
SHA256
a8fe17654d8f2a952fee93bd6e78864ee4a2e766c92e6ba7dda2b0117e1ef97a
-
SHA512
cec5e902dce2dd4d70eef4ca835efa2704e49c434dd81e2b99100df76b1b095110e11b54ad5d2036d60f5378bf5fd637c5e0d36b7fcd3c0cd9cd77bc34c95346
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-